@feltdb/core 0.8.3 → 0.8.4

package/dist/http-db.js

@@ -1,17 +1,100 @@
 import { FeltDBServiceError } from './error-codes.js';
+import { conditionalRefusal } from './transaction.js';
+import { BoundedBackoff, SingleFlightValue, cancellableDelay, describeFailure, } from './managed-recovery.js';
+/**
+ * A durable identity for one conditional write attempt.
+ *
+ * The authority deduplicates by transaction id, so a redelivered request
+ * cannot apply the same conditional write twice. Each *attempt* gets its own
+ * id, because a retry after a conflict is a new decision against fresh state
+ * and must be evaluated again rather than answered from the first attempt.
+ */
+function conditionalTransactionId(purpose) {
+    const unique = typeof crypto?.randomUUID === 'function'
+        ? crypto.randomUUID()
+        : `${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 10)}`;
+    return `${purpose}-${unique}`;
+}
 /** Network adapter implementing the same collection runtime contract as WASM. */
 export class HttpJsDb {
     url;
     token;
     applicationId;
     environment;
-    activeRevision;
     authWaiters = new Set();
+    /**
+     * Canonical revision discovery.
+     *
+     * This used to be `private activeRevision?: Promise<string>` assigned with
+     * `??=`, which cached the rejected promise a single timeout produced and
+     * poisoned the client for its whole life. It is a state machine now, and the
+     * state it refuses to keep is a failure.
+     */
+    revisionCache = new SingleFlightValue();
+    backoff;
+    requestTimeoutMs;
+    connectionState = 'closed';
+    availabilityState = 'unknown';
+    lastError;
+    lastSuccessAt;
+    nextRetryAt;
+    streamFailures = 0;
+    authorityFailures = 0;
     constructor(options) {
         this.url = options.url.replace(/\/$/, '');
         this.token = options.token || '';
         this.applicationId = options.applicationId;
         this.environment = options.environment || 'production';
+        this.requestTimeoutMs = Math.max(1, options.requestTimeoutMs ?? 30_000);
+        this.backoff = new BoundedBackoff(options.reconnect);
+    }
+    /**
+     * The operational view: connected, recovering, or unable to proceed.
+     *
+     * This does not replace the typed error a caller already receives. An
+     * application handles `FeltDBServiceError`; an operator reads this. Before
+     * PR39 the only signal for a swallowed failure was a `console.error` in the
+     * collection refresh path, which no program can act on.
+     */
+    health() {
+        const revision = this.revisionCache.snapshot();
+        const pending = this.nextRetryAt !== undefined ? this.nextRetryAt - Date.now() : undefined;
+        return {
+            connection_state: this.connectionState,
+            availability_state: this.availabilityState,
+            usable: this.availabilityState === 'available' && revision.state === 'cached',
+            recovery_possible: this.availabilityState !== 'closed'
+                && !['authentication', 'authorization', 'configuration'].includes(this.lastError?.failure_class ?? ''),
+            revision_state: revision.state,
+            ...(this.revisionCache.value !== undefined ? { revision_id: this.revisionCache.value } : {}),
+            consecutive_failures: this.authorityFailures,
+            ...(this.lastSuccessAt ?? revision.last_success_at
+                ? { last_success_at: this.lastSuccessAt ?? revision.last_success_at }
+                : {}),
+            ...(this.lastError ?? revision.last_failure
+                ? { last_error: this.lastError ?? revision.last_failure }
+                : {}),
+            ...(this.connectionState === 'backoff' && this.nextRetryAt !== undefined
+                ? {
+                    next_retry_at: new Date(this.nextRetryAt).toISOString(),
+                    next_retry_in_ms: Math.max(0, pending ?? 0),
+                }
+                : {}),
+        };
+    }
+    /** Record a failure for the operational surface, without swallowing it. */
+    recordFailure(error) {
+        const failure = describeFailure(error);
+        this.lastError = failure;
+        this.authorityFailures += 1;
+        this.availabilityState = failure.failure_class === 'closed' ? 'closed' : 'degraded';
+        return failure;
+    }
+    recordSuccess() {
+        this.availabilityState = 'available';
+        this.lastSuccessAt = new Date().toISOString();
+        this.lastError = undefined;
+        this.authorityFailures = 0;
     }
     headers(json = false) {
         return {
@@ -22,6 +105,10 @@ export class HttpJsDb {
     }
     updateToken(token) {
         this.token = token;
+        // Credentials changed, so a permanent authorization failure may no longer
+        // be permanent. The backoff returns to base for the same reason: the next
+        // attempt is against a different premise, not a repeat of the last one.
+        this.backoff.reset();
         for (const wake of this.authWaiters)
             wake();
         this.authWaiters.clear();
@@ -58,11 +145,38 @@ export class HttpJsDb {
         }
         return [key.slice(0, separator), key.slice(separator + 1)];
     }
+    /**
+     * The canonical revision for this application and environment.
+     *
+     * A success is cached for the life of the client, because a revision pointer
+     * the authority has already resolved does not change under a running client.
+     * Concurrent callers share one lookup. A failure is delivered to everyone
+     * waiting and cached by nobody, so the next operation tries again against
+     * whatever the authority has become.
+     *
+     * Nothing here retries on its own. That is the design, not an omission: the
+     * only automatic retry loop in this client is the event stream, and it is
+     * bounded and jittered. A revision lookup is re-attempted exactly when the
+     * application performs another operation, so a permanently misconfigured
+     * application produces the application's own call rate against the
+     * authority, never a client-generated storm on top of it.
+     */
     async revisionId() {
         if (!this.applicationId)
             throw new Error('applicationId is required for the canonical application service');
-        this.activeRevision ??= this.application_request('/application').then(value => value.revision_id);
-        return this.activeRevision;
+        return this.revisionCache.get(async () => {
+            const value = await this.application_request('/application');
+            if (!value?.revision_id) {
+                const error = new FeltDBServiceError('canonical application discovery returned no revision_id', 'VALIDATION_ERROR', undefined, 422);
+                this.recordFailure(error);
+                throw error;
+            }
+            return value.revision_id;
+        });
+    }
+    /** Discovery state for tests and diagnostics; never used to make decisions. */
+    revisionState() {
+        return this.revisionCache.state;
     }
     async canonical(path, payload) {
         const revisionId = await this.revisionId();
@@ -70,13 +184,13 @@ export class HttpJsDb {
                 application_id: this.applicationId, revision_id: revisionId, environment: this.environment, ...payload,
             }) });
     }
-    transactionDocument(revisionId, operations, transactionId = crypto.randomUUID()) {
+    transactionDocument(revisionId, operations, transactionId = crypto.randomUUID(), preconditions = []) {
         return { transaction_id: transactionId, tenant_id: '', application_id: this.applicationId, revision_id: revisionId, schema_version: 0,
-            authorization: { subject: '', tenant_id: '', application_id: this.applicationId, revision_id: revisionId, capabilities: [] }, operations };
+            authorization: { subject: '', tenant_id: '', application_id: this.applicationId, revision_id: revisionId, capabilities: [] }, operations, preconditions };
     }
-    async canonicalTransaction(operations, transactionId) {
+    async canonicalTransaction(operations, transactionId, preconditions = []) {
         const revisionId = await this.revisionId();
-        return this.application_request('/transactions', { method: 'POST', body: JSON.stringify({ application_id: this.applicationId, revision_id: revisionId, environment: this.environment, transaction: this.transactionDocument(revisionId, operations, transactionId) }) });
+        return this.application_request('/transactions', { method: 'POST', body: JSON.stringify({ application_id: this.applicationId, revision_id: revisionId, environment: this.environment, transaction: this.transactionDocument(revisionId, operations, transactionId, preconditions) }) });
     }
     async get(key) {
         try {
@@ -193,13 +307,32 @@ export class HttpJsDb {
      */
     async commit_transaction(request) {
         if (this.applicationId) {
-            if (request.preconditions?.length)
-                throw new Error('record preconditions are not representable by the canonical transaction contract');
             const operations = request.operations.map(operation => ({
                 kind: operation.value === undefined ? 'delete' : operation.requireAbsent ? 'insert' : 'update',
-                collection: operation.collection, id: operation.id, value: operation.value, if_version: operation.expectedVersion,
+                collection: operation.collection, id: operation.id, value: operation.value,
+            }));
+            // Every record-level guard travels as a `record` precondition, which the
+            // authority evaluates inside the same lock as the writes and against the
+            // fields a caller can actually read back.
+            //
+            // `if_version` is deliberately not used for this. It fences the row's
+            // internal storage sequence, and a caller's `expectedVersion` is the
+            // document's `__version`: two different numbers that happen to share a
+            // name. Sending one as the other is a fence that compares the wrong
+            // counter, which is worse than no fence at all because it reads as one.
+            const guards = [
+                ...(request.preconditions ?? []),
+                ...request.operations.filter(operation => operation.expectedVersion !== undefined
+                    || operation.expectedEpoch !== undefined
+                    || operation.expectedLeaseId !== undefined),
+            ].map(guard => ({
+                kind: 'record', collection: guard.collection, id: guard.id,
+                require_absent: guard.requireAbsent ?? false,
+                expected_version: guard.expectedVersion,
+                expected_epoch: guard.expectedEpoch,
+                expected_lease_id: guard.expectedLeaseId,
             }));
-            const result = await this.canonicalTransaction(operations, request.transactionId);
+            const result = await this.canonicalTransaction(operations, request.transactionId, guards);
             return { transactionId: result.transaction_id, baseRevision: result.base_revision, commitRevision: result.commit_revision, status: result.status, duplicate: result.duplicate, operations: operations.length, stateBefore: result.state_before, stateAfter: result.state_after };
         }
         const response = await fetch(`${this.url}/transactions`, {
@@ -228,7 +361,128 @@ export class HttpJsDb {
         const body = await response.json();
         return body;
     }
+    /**
+     * Atomically create a record only if the key is free.
+     *
+     * Routed through the authority's own transaction, not emulated with a read
+     * followed by a write: between a read and a write another writer commits,
+     * and the whole point of this call is that exactly one caller wins.
+     *
+     * A lost race is a value, not an exception -- `{ inserted: false }` with the
+     * record the winner wrote. Every other failure (authentication, schema,
+     * transport, a server error) is raised, because reporting one of those as
+     * "someone else got there first" would let a caller skip work it must do.
+     *
+     * One difference from the embedded runtimes is worth stating rather than
+     * discovering: the authority owns `__version` on a conditional create and
+     * stores 1, where an embedded runtime stores the caller's object verbatim.
+     * `Collection.putIfAbsent` supplies version 1 either way, so a collection
+     * caller sees no difference; a caller of this raw key/value surface does.
+     */
+    async putIfAbsent(key, value) {
+        const [collection, id] = this.splitKey(key);
+        const record = JSON.parse(value);
+        try {
+            await this.commit_transaction({
+                transactionId: conditionalTransactionId('put-if-absent'),
+                operations: [{ collection, id, value: record, requireAbsent: true }],
+            });
+        }
+        catch (error) {
+            if (!conditionalRefusal(error).conflict)
+                throw error;
+            const existing = await this.get(key);
+            if (!existing.success) {
+                throw new Error(existing.error || `could not read the record that won ${key}`);
+            }
+            if (existing.data === undefined) {
+                // The winner's record was removed between the refusal and this read.
+                // Reporting it as an existing record would hand back a value nobody
+                // wrote, so the ambiguity is raised instead of invented away.
+                throw new Error(`${key} was created and then removed while resolving a conditional create`);
+            }
+            return { inserted: false, value: existing.data };
+        }
+        // The authority assigns version 1 inside the commit boundary for a
+        // conditional create, so the committed record is known without a second
+        // request. See docs/architecture/transaction-version-contract.md.
+        return { inserted: true, value: JSON.stringify({ ...record, id, __version: 1 }) };
+    }
+    /**
+     * Compare-and-set through the managed authority's transaction surface.
+     *
+     * The managed runtime serves the canonical application contract and not the
+     * single-record `/cas` endpoint, so a conditional update reaches it as a
+     * one-operation transaction fenced on the record's `__version`. It is the
+     * same predicate, evaluated by the same authority, inside the same lock.
+     */
+    async managedCas(params) {
+        if (params.rejectIfDiverged) {
+            // Refused rather than dropped. A guard that is silently ignored reads as
+            // protection and provides none.
+            throw new Error('rejectIfDiverged is a replication predicate the canonical transaction contract cannot express');
+        }
+        const [collection, id] = this.splitKey(params.key);
+        const proposed = JSON.parse(params.value);
+        // The authority owns the next version. A caller-computed one must not be
+        // installable, so it never leaves here.
+        delete proposed.__version;
+        try {
+            await this.commit_transaction({
+                transactionId: conditionalTransactionId('update-if-version'),
+                operations: [{
+                        collection, id, value: proposed,
+                        expectedVersion: params.expectedVersion,
+                        expectedEpoch: params.expectedEpoch,
+                        expectedLeaseId: params.expectedLeaseId,
+                    }],
+            });
+        }
+        catch (error) {
+            const refusal = conditionalRefusal(error);
+            if (!refusal.conflict)
+                throw error;
+            return { updated: false, ...(await this.observedConflict(params.key, refusal.failure)) };
+        }
+        const committed = { ...proposed, id, __version: params.expectedVersion + 1 };
+        return {
+            updated: true,
+            currentVersion: params.expectedVersion + 1,
+            currentEpoch: params.expectedEpoch,
+            item: committed,
+        };
+    }
+    /**
+     * What the authority actually holds after it refused a conditional update.
+     *
+     * The refusal usually names it, and that is the answer worth having because
+     * it was read inside the commit lock. When the failure does not carry a
+     * version -- the record was deleted, or an epoch or lease predicate failed --
+     * the record is re-read, which is what the caller would have to do anyway.
+     */
+    async observedConflict(key, failure) {
+        const conflictCode = failure?.predicate === 'version' ? 'VERSION_CONFLICT'
+            : failure?.predicate === 'epoch' ? 'AUTHORITY_CONFLICT'
+                : failure?.predicate === 'lease' ? 'LEASE_CONFLICT'
+                    : failure?.predicate === 'missing' ? 'RECORD_MISSING'
+                        : failure?.predicate === 'present' ? 'RECORD_PRESENT'
+                            : undefined;
+        if (failure?.predicate === 'version' && typeof failure.actual === 'number') {
+            return { currentVersion: failure.actual, conflictCode };
+        }
+        const current = await this.get(key);
+        const record = current.success && current.data
+            ? JSON.parse(current.data)
+            : undefined;
+        return {
+            currentVersion: typeof record?.__version === 'number' ? record.__version : 0,
+            currentEpoch: record?.authority?.epoch,
+            conflictCode,
+        };
+    }
     async cas(params) {
+        if (this.applicationId)
+            return this.managedCas(params);
         try {
             const [collection, id] = this.splitKey(params.key);
             const parsed = JSON.parse(params.value);
@@ -337,11 +591,20 @@ export class HttpJsDb {
         const context = this.applicationId
             ? `${separator}application_id=${encodeURIComponent(this.applicationId)}&environment=${encodeURIComponent(this.environment)}`
             : '';
-        const response = await fetch(`${this.url}/v1${path}${context}`, {
-            ...init,
-            signal: init.signal ?? AbortSignal.timeout(30_000),
-            headers: { ...this.headers(init.body !== undefined), ...(init.headers || {}) },
-        });
+        if (this.availabilityState === 'degraded')
+            this.availabilityState = 'recovering';
+        let response;
+        try {
+            response = await fetch(`${this.url}/v1${path}${context}`, {
+                ...init,
+                signal: init.signal ?? AbortSignal.timeout(this.requestTimeoutMs),
+                headers: { ...this.headers(init.body !== undefined), ...(init.headers || {}) },
+            });
+        }
+        catch (error) {
+            this.recordFailure(error);
+            throw error;
+        }
         const text = await response.text();
         let body;
         try {
@@ -351,34 +614,75 @@ export class HttpJsDb {
             body = { message: text };
         }
         if (!response.ok) {
-            throw new FeltDBServiceError(body?.message || body?.error || `FeltDB service request failed: HTTP ${response.status}`, body?.code || body?.error || 'REQUEST_FAILED', body?.request_id, response.status);
+            const error = new FeltDBServiceError(body?.message || body?.error || `FeltDB service request failed: HTTP ${response.status}`, body?.code || body?.error || 'REQUEST_FAILED', body?.request_id, response.status);
+            this.recordFailure(error);
+            throw error;
         }
+        this.recordSuccess();
         return body;
     }
+    /**
+     * Subscribe to change notifications.
+     *
+     * The returned function is the only cancellation surface, and it has to do
+     * two things rather than one: abort the connection that may be open, and
+     * cancel the reconnect that may be pending. Cancelling only the first leaves
+     * a timer that wakes up after the caller has unsubscribed and opens a new
+     * connection to an authority nobody is listening to.
+     */
     subscribe_changes(callback) {
         const controller = new AbortController();
+        this.connectionState = 'connecting';
         void this.consumeEvents(controller, callback);
-        return () => controller.abort();
+        return () => {
+            // `abort()` reaches both: the in-flight fetch through its signal, and
+            // the pending backoff through the listener `cancellableDelay` installs.
+            controller.abort();
+            this.connectionState = 'closed';
+            this.nextRetryAt = undefined;
+        };
     }
     async consumeEvents(controller, callback) {
         while (!controller.signal.aborted) {
             if (!this.token) {
+                // No credentials is not a transient transport failure and must not be
+                // retried on a timer. The loop waits for a token rather than spinning.
+                this.connectionState = 'failed';
+                this.availabilityState = 'degraded';
                 await this.waitForAuthChange(controller.signal);
                 continue;
             }
+            let connected = false;
+            let reader;
             try {
+                this.connectionState = 'connecting';
                 const eventPath = this.applicationId ? `/v1/events?application_id=${encodeURIComponent(this.applicationId)}&environment=${encodeURIComponent(this.environment)}` : '/events';
                 const response = await fetch(`${this.url}${eventPath}`, {
                     headers: this.headers(),
                     signal: controller.signal,
                 });
                 if (response.status === 401 || response.status === 403) {
+                    // Permanent until something changes. Waiting for an auth change is
+                    // the correct response; backing off and retrying the same rejected
+                    // credentials is a request storm with extra steps.
+                    this.recordFailure(new FeltDBServiceError(`Event stream rejected: HTTP ${response.status}`, response.status === 401 ? 'AUTHENTICATION_REQUIRED' : 'FORBIDDEN', undefined, response.status));
+                    this.connectionState = 'failed';
+                    this.availabilityState = 'degraded';
                     await this.waitForAuthChange(controller.signal);
                     continue;
                 }
-                if (!response.ok || !response.body)
-                    throw new Error(`Event stream failed: HTTP ${response.status}`);
-                const reader = response.body.getReader();
+                if (!response.ok || !response.body) {
+                    throw new FeltDBServiceError(`Event stream failed: HTTP ${response.status}`, 'SERVICE_UNAVAILABLE', undefined, response.status);
+                }
+                // The stream is open and readable. This is what "stable" means here,
+                // and it is what resets the backoff: a connection that was accepted
+                // and delivered is evidence the authority is serving again.
+                connected = true;
+                this.connectionState = 'connected';
+                this.streamFailures = 0;
+                this.recordSuccess();
+                this.backoff.reset();
+                reader = response.body.getReader();
                 const decoder = new TextDecoder();
                 let buffer = '';
                 while (!controller.signal.aborted) {
@@ -400,19 +704,30 @@ export class HttpJsDb {
             }
             catch (error) {
                 if (controller.signal.aborted)
-                    return;
+                    break;
+                this.streamFailures += 1;
+                this.recordFailure(error);
+            }
+            finally {
+                // Release the body whether the stream ended, failed or was aborted.
+                if (reader)
+                    await reader.cancel().catch(() => { });
             }
             if (controller.signal.aborted)
-                return;
-            // The retry timer must not keep a Node process alive on its own. An
-            // authority that has shut down would otherwise stop its clients from
-            // ever exiting, because this loop reconnects forever.
-            await new Promise(resolve => {
-                const timer = setTimeout(resolve, 1000);
-                timer?.unref?.();
-                controller.signal.addEventListener('abort', () => { clearTimeout(timer); resolve(); }, { once: true });
-            });
+                break;
+            if (!connected) {
+                // Only a connection that never opened counts against the backoff. A
+                // stream that ran and then ended is a normal reconnect, not a failure.
+                this.streamFailures = Math.max(this.streamFailures, 1);
+            }
+            const delay = this.backoff.next();
+            this.connectionState = 'backoff';
+            this.nextRetryAt = Date.now() + delay;
+            await cancellableDelay(delay, controller.signal);
+            this.nextRetryAt = undefined;
         }
+        this.connectionState = 'closed';
+        this.nextRetryAt = undefined;
     }
     async failure(response) {
         let detail = `HTTP ${response.status}`;

package/dist/index-core.d.ts

@@ -9,6 +9,7 @@
  * Applications import `@feltdb/core`, not this module directly.
  */
 export * from './db.js';
+export * from './deployment.js';
 export * from './collection.js';
 export * from './transaction.js';
 export * from './freshness.js';
@@ -40,6 +41,7 @@ export * from './state-contract.js';
 export * from './revision-recovery.js';
 export * from './operation-admission.js';
 export * from './error-codes.js';
+export * from './managed-recovery.js';
 export * from './authorization.js';
 export * from './sync-contract.js';
 export * from './workload.js';

package/dist/index-core.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index-core.d.ts","sourceRoot":"","sources":["../src/index-core.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,cAAc,SAAS,CAAC;AACxB,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,WAAW,CAAC;AAC1B,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,YAAY,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAC9E,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC;AAC9B,cAAc,2BAA2B,CAAC;AAC1C,cAAc,qBAAqB,CAAC;AACpC,cAAc,wBAAwB,CAAC;AACvC,cAAc,0BAA0B,CAAC;AACzC,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,iCAAiC,CAAC;AAChD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,oBAAoB,CAAC;AACnC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,OAAO,EACL,eAAe,EACf,KAAK,OAAO,EACZ,KAAK,SAAS,IAAI,iBAAiB,EACnC,KAAK,QAAQ,IAAI,gBAAgB,GAClC,MAAM,eAAe,CAAC;AAEvB;;GAEG;AACH,cAAc,YAAY,CAAC;AAC3B,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AAEnC;;GAEG;AACH,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACnE,YAAY,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEzE;;GAEG;AACH,YAAY,EACV,eAAe,EACf,cAAc,EACd,cAAc,EACd,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,SAAS,CAAC;AAEjB;;;;GAIG;AACH,cAAc,wBAAwB,CAAC;AACvC,cAAc,iCAAiC,CAAC"}
+{"version":3,"file":"index-core.d.ts","sourceRoot":"","sources":["../src/index-core.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,cAAc,SAAS,CAAC;AACxB,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,WAAW,CAAC;AAC1B,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,YAAY,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAC9E,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC;AAC9B,cAAc,2BAA2B,CAAC;AAC1C,cAAc,qBAAqB,CAAC;AACpC,cAAc,wBAAwB,CAAC;AACvC,cAAc,0BAA0B,CAAC;AACzC,cAAc,kBAAkB,CAAC;AACjC,cAAc,uBAAuB,CAAC;AACtC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,iCAAiC,CAAC;AAChD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,oBAAoB,CAAC;AACnC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,OAAO,EACL,eAAe,EACf,KAAK,OAAO,EACZ,KAAK,SAAS,IAAI,iBAAiB,EACnC,KAAK,QAAQ,IAAI,gBAAgB,GAClC,MAAM,eAAe,CAAC;AAEvB;;GAEG;AACH,cAAc,YAAY,CAAC;AAC3B,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AAEnC;;GAEG;AACH,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACnE,YAAY,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEzE;;GAEG;AACH,YAAY,EACV,eAAe,EACf,cAAc,EACd,cAAc,EACd,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,SAAS,CAAC;AAEjB;;;;GAIG;AACH,cAAc,wBAAwB,CAAC;AACvC,cAAc,iCAAiC,CAAC"}

package/dist/index-core.js

@@ -9,6 +9,7 @@
  * Applications import `@feltdb/core`, not this module directly.
  */
 export * from './db.js';
+export * from './deployment.js';
 export * from './collection.js';
 export * from './transaction.js';
 export * from './freshness.js';
@@ -39,6 +40,7 @@ export * from './state-contract.js';
 export * from './revision-recovery.js';
 export * from './operation-admission.js';
 export * from './error-codes.js';
+export * from './managed-recovery.js';
 export * from './authorization.js';
 export * from './sync-contract.js';
 export * from './workload.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAOH,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC;AAE7B;;;;;;GAMG;AACH,cAAc,sBAAsB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAeH,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC;AAE7B;;;;;;GAMG;AACH,cAAc,sBAAsB,CAAC"}

package/dist/index.js

@@ -11,8 +11,17 @@
  * map, so that a bare `fs` import never enters a browser module graph.
  */
 import { registerRuntime } from './runtime-registry.js';
+import { registerDeploymentConfigLoader } from './deployment.js';
 import { FileJsDb } from './file-db.js';
+import * as nodeFs from 'fs';
+import * as nodePath from 'path';
 registerRuntime('file', path => new FileJsDb(path));
+registerDeploymentConfigLoader(() => {
+    const configPath = nodePath.join(process.cwd(), 'feltdb.config.json');
+    if (!nodeFs.existsSync(configPath))
+        return undefined;
+    return JSON.parse(nodeFs.readFileSync(configPath, 'utf8'));
+});
 export * from './index-core.js';
 export * from './file-db.js';
 /**

package/dist/indexeddb-db.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"indexeddb-db.d.ts","sourceRoot":"","sources":["../src/indexeddb-db.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAA8B,KAAK,mBAAmB,EAAE,KAAK,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AACrG,OAAO,KAAK,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAQ1F,UAAU,QAAQ;IAAG,OAAO,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE;AACtE,UAAU,YAAY;IAAG,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,KAAK,GAAG,QAAQ,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE;AACrK,KAAK,cAAc,GAAG,CAAC,UAAU,EAAE,MAAM,KAAK,IAAI,CAAC;AAEnD,qGAAqG;AACrG,qBAAa,aAAc,YAAW,IAAI;IACxC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAuB;IAChD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAmB;IAC5C,OAAO,CAAC,QAAQ,CAAK;IACrB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAqB;IAC3C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAsD;IACtF,OAAO,CAAC,YAAY,CAAK;IACzB,OAAO,CAAC,oBAAoB,CAAK;IACjC,OAAO,CAAC,iBAAiB,CAAS;IAClC,OAAO,CAAC,eAAe,CAAC,CAAgC;IACxD,OAAO,CAAC,sBAAsB,CAAS;IACvC,OAAO,CAAC,sBAAsB,CAAS;IACvC,OAAO,CAAC,0BAA0B,CAAwD;IAC1F,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAqB;gBAElD,SAAS,EAAE,MAAM;IAO7B,OAAO,CAAC,IAAI;IAgBZ,OAAO,CAAC,QAAQ;YAMF,MAAM;IA8BpB,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IACrD,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IACrD,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAEtC;;;;;;;OAOG;IACG,kBAAkB,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,uBAAuB,CAAC;IA+FvF,GAAG,CAAC,MAAM,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC;IAgF3H,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAKnC,KAAK,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;YAapC,OAAO;IAKrB,iBAAiB,CAAC,QAAQ,EAAE,cAAc,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,IAAI;IAoB5E,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAQnC;IAEF,OAAO,CAAC,yBAAyB;IASjC,OAAO,CAAC,mBAAmB;IAM3B,OAAO,CAAC,yBAAyB;IAUjC,OAAO,CAAC,qBAAqB;YAQf,sBAAsB;YAwBtB,oBAAoB;YASpB,WAAW;IAyBzB,OAAO,CAAC,qBAAqB;IAc7B,KAAK,IAAI,IAAI;IAMb,sBAAsB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAC7D,UAAU,IAAI,QAAQ;IACtB,SAAS,IAAI,QAAQ;IACrB,QAAQ,IAAI,QAAQ;IACpB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ;IACvC,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ;IAC1C,oBAAoB,IAAI,QAAQ;IAChC,2BAA2B,IAAI,QAAQ;IACvC,WAAW,IAAI,MAAM;IACrB,YAAY,IAAI,MAAM;IAEtB;;;;;;;;;;;OAWG;IACH,SAAS,IAAI,mBAAmB;IAiBhC;;;;;;OAMG;IACG,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IAS7B,YAAY,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;IACvC,iBAAiB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IACjE,uBAAuB,CAAC,UAAU,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAwBzG"}
+{"version":3,"file":"indexeddb-db.d.ts","sourceRoot":"","sources":["../src/indexeddb-db.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAA8B,KAAK,mBAAmB,EAAE,KAAK,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AACrG,OAAO,KAAK,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAQ1F,UAAU,QAAQ;IAAG,OAAO,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE;AACtE,UAAU,YAAY;IAAG,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,KAAK,GAAG,QAAQ,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE;AACrK,KAAK,cAAc,GAAG,CAAC,UAAU,EAAE,MAAM,KAAK,IAAI,CAAC;AAEnD,qGAAqG;AACrG,qBAAa,aAAc,YAAW,IAAI;IACxC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAuB;IAChD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAmB;IAC5C,OAAO,CAAC,QAAQ,CAAK;IACrB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAqB;IAC3C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAsD;IACtF,OAAO,CAAC,YAAY,CAAK;IACzB,OAAO,CAAC,oBAAoB,CAAK;IACjC,OAAO,CAAC,iBAAiB,CAAS;IAClC,OAAO,CAAC,eAAe,CAAC,CAAgC;IACxD,OAAO,CAAC,sBAAsB,CAAS;IACvC,OAAO,CAAC,sBAAsB,CAAS;IACvC,OAAO,CAAC,0BAA0B,CAAwD;IAC1F,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAqB;gBAElD,SAAS,EAAE,MAAM;IAO7B,OAAO,CAAC,IAAI;IAgBZ,OAAO,CAAC,QAAQ;YAMF,MAAM;IA8BpB,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IACrD,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IACrD,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAEtC;;;;;;;OAOG;IACG,kBAAkB,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,uBAAuB,CAAC;IA6GvF,GAAG,CAAC,MAAM,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC;IAgF3H,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAKnC,KAAK,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;YAapC,OAAO;IAKrB,iBAAiB,CAAC,QAAQ,EAAE,cAAc,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,IAAI;IAoB5E,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAQnC;IAEF,OAAO,CAAC,yBAAyB;IASjC,OAAO,CAAC,mBAAmB;IAM3B,OAAO,CAAC,yBAAyB;IAUjC,OAAO,CAAC,qBAAqB;YAQf,sBAAsB;YAwBtB,oBAAoB;YASpB,WAAW;IAyBzB,OAAO,CAAC,qBAAqB;IAc7B,KAAK,IAAI,IAAI;IAMb,sBAAsB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAC7D,UAAU,IAAI,QAAQ;IACtB,SAAS,IAAI,QAAQ;IACrB,QAAQ,IAAI,QAAQ;IACpB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ;IACvC,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ;IAC1C,oBAAoB,IAAI,QAAQ;IAChC,2BAA2B,IAAI,QAAQ;IACvC,WAAW,IAAI,MAAM;IACrB,YAAY,IAAI,MAAM;IAEtB;;;;;;;;;;;OAWG;IACH,SAAS,IAAI,mBAAmB;IAiBhC;;;;;;OAMG;IACG,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IAS7B,YAAY,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;IACvC,iBAAiB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IACjE,uBAAuB,CAAC,UAAU,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAwBzG"}